Use of eval is strongly discouraged as it poses security risks

ruimarinho / google-libphonenumber

The up-to-date and reliable Google's libphonenumber package for node.js.

https://ruimarinho.github.io/google-libphonenumber

Other

1.39k stars 144 forks source link

Use of eval is strongly discouraged as it poses security risks #361

Closed andyslack closed 1 year ago

andyslack commented 1 year ago

Hi Guys,

Another project which imports this package is kicking up errors and I guess its happening for all projects using it.

https://github.com/CdTgr/vue3-q-tel-input/issues/24#issuecomment-1442177838

Is this something you could look into fixing and it's breaking our CI/CD pipelines.

ruimarinho commented 1 year ago

Replied on the original thread but tldr; I don't think there's anything I can do to prevent this as it is due to the use of the Google Closure Library bundle.